Information Security Officer

Builds and maintains the IAEA information security programme for Agency systems and data. The P-3 officer operates the Information Security Management System, develops policies and risk controls, assesses and remediates vulnerabilities, embeds security in IT projects, delivers awareness activities and clear technical reports, and helps maintain ISO 27001 certification across the Agency.

• Develop information-security policies, procedures and guidance for Agency systems and data
• Operate the Agency Information Security Management System to maintain ISO 27001 certification
• Develop and maintain risk-management processes and mitigating technical and organisational controls
• Assess security risks, recommend corrective actions and monitor remediation
• Deliver security-awareness activities including training, phishing exercises and intranet communications
• Represent the CISO in IT projects to embed information security
• Produce clear oral and written reports on complex technical matters

• Bachelor’s degree in computer science, information management, IT security or a related field
• Accredited information or IT security certification such as CISSP, CISM, CISA or GIAC
• At least 5 years managing information-security programmes in enterprise IT environments using standardised frameworks such as ISO/IEC 27000
• Excellent oral and written command of English

• Project-management certification such as PMP or PRINCE2
• Knowledge of Arabic, Chinese, French, Russian or Spanish

• Information Security
• Security Risk Management
• Identity Management
• Security Architecture
• ISO 27001
• Security Controls
• Risk Assessment
• Security Awareness
• Policy Development
• IT Project Management

• ITIL
• PRINCE2
• ISO 27001

• Fixed-term regular appointment for 36 months with a one-year probation period
• Tax-free annual net base salary starts at USD 71,335 plus post adjustment and benefits